This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File:                     CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier:          uQg2HQaFGqVvM+yjwoEKy8gUlQ3BTJhtBUayM3ATzUQ=
Subject key identifier:   10:65:D7:2D:AC:DC:34:13:AB:70:53:AA:7B:91:33:8C:8A:E3:B6:6A
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer:       /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial:       019AF2ADBAD712441B20135258D818269EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number:          0C0E
Signing time:             Sat 06 Dec 2025 08:01:03 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:03 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:03 +0000
Files and hashes:         1: 7Z9cH1C8XPNJTxdsgH0ox-pTxZg.roa (hash: 4+TklJPq6Xjl0HFZYNmTMPoe1Qx5I4KGqW30JOPepMU=)
                          2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: d5EPQ3LUGtZuW9LjeSIpJOXWRK484+X0zj7+or1IR5o=)
                          3: MGVL3PWcg672eUJnE3OmpM02shQ.roa (hash: jaWN7PLFw0laWd8mU2a0x2xqPQpnAcAJ/82ZDzopnzE=)
                          4: XOvbyx3UQe3ioe3WIioqTg18gLc.roa (hash: ea9vAcTvRvN3FKh7IaXOQom5/auFDGoilHFurQmTuD0=)
                          5: c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa (hash: s8IHGFPKGHVe+UT4NM56ryEb8GnNOyNh3KVfvOyTvrs=)
                          6: xsTVjIeVJzqy3Dly9i83AhLsDng.roa (hash: ivpCGfFhECEPmQVaRhGvlFpdc3270xnQ6EhBDnMhaxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:ba:d7:12:44:1b:20:13:52:58:d8:18:26:9e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
        Validity
            Not Before: Dec  6 08:01:03 2025 GMT
            Not After : Dec  7 08:01:03 2025 GMT
        Subject: CN=1065d72dacdc3413ab7053aa7b91338c8ae3b66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:ab:ca:be:d2:36:7b:27:8a:bd:35:f2:06:
                    e0:5f:e5:c2:bd:a7:66:77:ca:e9:9e:90:e2:ca:a6:
                    aa:02:f9:b4:e7:a6:b4:b0:a8:81:5f:c0:41:d4:2c:
                    d5:19:8c:45:83:ae:85:38:b7:93:f8:fc:72:4b:70:
                    ac:43:6d:ac:bb:97:f1:0a:e4:7d:5a:86:62:9b:39:
                    0f:10:40:af:ed:c0:76:3e:a0:1d:fc:54:b5:a3:07:
                    f1:0a:24:93:71:ec:97:71:f9:dc:31:ad:55:a4:b7:
                    e3:ee:42:27:63:32:e3:b8:18:15:76:8f:73:fd:0f:
                    44:37:6c:2e:c4:1d:b7:89:a3:32:98:ec:ae:c2:fe:
                    da:bb:07:b6:d2:4e:fb:41:7f:01:80:78:88:b8:ac:
                    e1:72:86:8a:69:5a:cf:f0:6c:1f:63:0b:de:44:e9:
                    b9:a9:2c:e8:36:a8:d7:8a:fe:d0:a3:39:bb:e7:c5:
                    0d:6a:28:64:37:bd:0c:2b:3c:05:35:c5:2e:4c:d2:
                    12:3d:8e:d9:da:60:a9:e2:7b:4a:cc:44:7d:49:26:
                    06:92:94:76:ba:71:39:84:2f:ee:55:88:ee:9e:79:
                    5d:a9:9e:50:2f:0e:67:1b:16:47:77:60:ba:b3:31:
                    8b:94:14:3a:cb:6a:a3:24:b8:2e:23:ae:fe:4d:ac:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:65:D7:2D:AC:DC:34:13:AB:70:53:AA:7B:91:33:8C:8A:E3:B6:6A
            X509v3 Authority Key Identifier:
                keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:56:ea:e6:36:27:94:2a:46:83:96:df:0a:0e:cd:62:ba:78:
         d6:0a:42:76:b4:f1:f1:ac:a9:a8:ed:10:31:43:0b:0c:7f:3e:
         11:e6:c7:25:20:dd:7b:4c:de:2c:bc:24:90:8b:f4:5e:1e:28:
         f7:f1:bd:5a:7c:e6:54:3b:ec:b8:a2:09:ce:1d:f2:8e:a5:2a:
         c4:18:8a:41:9c:16:6b:d3:8f:a3:0c:ed:ff:d5:e2:a7:9d:8d:
         85:06:cf:39:08:63:ed:45:ee:6d:4b:f7:0b:17:0a:aa:2f:26:
         57:6a:c1:ea:f5:98:78:99:0c:b7:dc:3d:be:9c:2b:d4:36:1e:
         62:40:9d:33:73:70:83:8d:c5:f1:a6:85:dc:a8:26:3e:dd:fe:
         58:3b:78:5b:97:54:93:c2:1a:e8:c7:b6:ea:5d:99:cb:3d:27:
         ce:fe:8f:59:a4:c5:d2:b7:92:1f:cc:92:48:44:ff:fa:f4:b5:
         4b:44:9f:03:6a:9d:e1:6e:e0:5c:79:15:02:15:b0:de:8c:0d:
         75:03:ef:98:bf:00:ec:84:0a:c8:9b:1e:d1:9c:64:56:16:87:
         d6:54:33:ca:f8:09:4a:ee:b9:f0:65:c4:62:77:f2:a5:86:64:
         61:b7:01:fe:0b:87:1e:74:29:1c:10:83:40:8f:57:21:6e:72:
         60:e3:39:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:59:57 2025 by rpki-client